CVE-2025-6379

creationtimestamp| type| source ---|---|--- 2025-06-28 03:55:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19802 2025-06-28 07:34:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsnndw3s4a2u...

CVE-2025-6379

CVE-2025-6379 (BeeTeam368 Extensions Pro, WordPress) The vulnerability is a directory traversal in the BeeTeam368 Extensions Pro plugin (versions up to 2.3.4) via the handle_live_fn() function, allowing authenticated users with Subscriber+ access to access files outside the intended directory and...

WordPress BeeTeam368 Extensions Pro plugin <= 2.3.4 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Deletion vulnerability

Authenticated Subscriber+ Directory Traversal to Arbitrary File Deletion vulnerability discovered by Tonn in WordPress Plugin BeeTeam368 Extensions Pro versions = 2.3.4...